SharkNinja

SharkNinja, the maker of the cloud-connected Shark robot vacuums & Ninja kitchen appliances, shipped robot vacuums with a security flaw that in 2026 let outsiders take over the machines across an entire Amazon cloud region and, on camera-equipped models, reach the live camera feed & the home Wi-Fi password; the flaw was still unpatched when the researcher who found it published it on July 13, 2026.^[1][2] The company has also been the subject of large U.S. safety recalls, including about 1.8 million Ninja Foodi pressure cookers pulled in 2025 after 106 reported burn injuries.^[3] SharkNinja, Inc. is a publicly traded appliance company headquartered in Needham, Massachusetts, that reported $6.4 billion in net sales for fiscal 2025.^[4][5]

• SharkNinja's cloud-connected Shark robot vacuums shipped with a flaw that, as of its July 13, 2026 disclosure, let outsiders take over the machines region-wide & reach the camera feed, home map, & Wi-Fi password on camera-equipped models; it was still unpatched.^[2][1]
• About 1.8 million Ninja Foodi pressure cookers were recalled in 2025 after 106 burn injuries, including more than 50 second- or third-degree burns, with 26 lawsuits filed.^[3]
• A repair-advocate survey filed with the U.S. Federal Trade Commission in 2023 reported that it was unable to reach SharkNinja & placed the company among the 86% of appliance makers that did not provide full repair instructions.^[6]
• A SharkNinja two-year limited warranty charges the owner a $19.95 fee to receive a repaired or replacement unit & excludes wearable parts such as filters & batteries.^[7]
• Two earlier recalls covered about 1.1 million Ninja BL660 blenders for a laceration risk in 2015 & about 142,000 Shark vacuums for an electric-shock risk in 2015.^[8][9]

SharkNinja, Inc. describes itself as a global product design & technology company selling under the Shark & Ninja brands across cleaning, cooking & beverage, food preparation, & beauty & home environment appliances, & is headquartered in Needham, Massachusetts.^[4] The SharkNinja name dates to July 22, 2015, when the housewares maker Euro-Pro renamed itself to unify its Shark & Ninja brands under one identity.^[10] The current corporate entity was incorporated in the Cayman Islands on May 17, 2023 as a subsidiary of JS Global Lifestyle Company Limited, which the filing calls its former parent, & its ordinary shares have traded on the New York Stock Exchange under the symbol SN since July 31, 2023.^[4] For fiscal 2025 it reported net sales of $6,399.2 million, up 15.7% year over year, under chief executive Mark Barrocas.^[5]

Many of its products are cloud-connected & controlled through a phone app. Shark robot vacuums keep a permanent connection to Amazon's cloud so owners can start, stop, & steer them from the SharkClean app, & camera-equipped models stream mapping & camera data to that cloud.^[2][11]

In a January 31, 2023 comment to the U.S. Federal Trade Commission filed under Matter No. R611004, the Digital Right to Repair Coalition reported that it attempted to acquire service manuals from 50 appliance manufacturers & that 86% of the companies it surveyed did not provide full repair instructions.^[6] In the survey notes behind that finding, the coalition recorded that it was unable to reach SharkNinja while trying to obtain a service manual for a Shark product.^[6] The comment is part of the broader right to repair record on appliance service information.

A SharkNinja two-year limited warranty document covers repair or replacement of a defective unit but places specific costs on the owner. SharkNinja covers the cost of shipping a unit in for repair or replacement, but the customer is charged a $19.95 for return shipping costs fee at the time the repaired or replacement unit is shipped back.^[7] Wearable parts such as foam filters, HEPA filters, pads, & batteries are not covered.^[7] When a replacement unit is issued, its coverage ends six months after the replacement's receipt date or the remainder of the existing warranty, whichever is greater, so a replacement does not restart the two-year term.^[7] The document names no specific product model & carries no printed date.

SharkNinja's Connected Devices Privacy Notice tells robot-vacuum owners that Images from the camera stay on your machine and are not accessed by SharkNinja & that mapping data from the robot is sent to the SharkClean app.^[11] Reporting on the 2026 robot vacuum flaw found that an outsider exploiting it could reach the live camera feed on camera-equipped Shark models anyway.^[1][12]

Main article: Shark robot vacuum cloud vulnerability (2026)

A researcher publishing under the handle tokay0 reported to SharkNinja on March 1, 2026 that Shark robot vacuums authenticated to Amazon Web Services with an over-permissive device certificate, letting a certificate copied off one vacuum issue remote commands to other Shark vacuums in the same cloud region.^[2][1] The flaw enabled remote code execution across the region &, on camera-equipped models, exposed the camera feed, the stored home map, & the Wi-Fi password held on the device as readable text.^[2][1] tokay0 published the still-unpatched flaw on July 13, 2026; no CVE identifier had been assigned.^[2][1][13]

On May 1, 2025 the U.S. Consumer Product Safety Commission announced recall number 25-247 covering about 1,846,400 Ninja Foodi OP300 Series multi-function pressure cookers in the United States, because the pressure-cooking lid could be opened during use & release hot contents, posing a burn risk.^[3] The notice recorded 106 reports of burn injuries, including more than 50 reports of second- or third-degree burns to the face or body, with 26 lawsuits filed; the remedy was a free replacement lid.^[3]

The CPSC pulled about 1.1 million Ninja BL660 blenders on November 12, 2015 under recall number 16-034, following 53 reports of lacerations.^[8] The agency described a laceration risk if consumers poured or inverted the pitcher after removing the lid while the loose stacked blade assembly was still inside.^[8]

About 142,000 Shark vacuum cleaners were recalled in the United States on April 22, 2015 under CPSC recall number 15-120. They were imported by Euro-Pro Operating LLC of Newton, Massachusetts, the name the company used before its July 2015 rename to SharkNinja.^[9][10] The recall cited an aluminum wand that could disconnect from the handle & remain energized, posing an electric-shock risk; the agency logged 62 reports of the wand disconnecting & no injuries.^[9]